Vulnerabilities

TI-2026-28292 CVE-2026-39276 · GHSA-w926-pxjj-3c5v

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability…

HIGH 67

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00782 Published 2026-05-29 No fix listed CWE-22

TI-2026-27032 CVE-2026-34788

Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters

MEDIUM 64

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00356 Published 2026-04-03 No fix listed CWE-89

TI-2026-27031 CVE-2026-34787

Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter

MEDIUM 64

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00531 Published 2026-04-03 No fix listed CWE-98

TI-2026-26854 CVE-2026-34607

Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE

HIGH 67

Emlog is an open source website building system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0089 Published 2026-04-03 No fix listed CWE-22

TI-2026-26524 CVE-2026-34229

Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass

MEDIUM 60

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2026-04-03 Fixed in 2.6.8 CWE-79

TI-2026-26523 CVE-2026-34228

Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write

HIGH 71

Emlog is an open source website building system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00195 Published 2026-04-03 Fixed in 2.6.8 CWE-352

TI-2026-24498 CVE-2026-31954

Emlog asynchronous media file deletion missing CSRF protection

HIGH 65

Emlog is an open source website building system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00175 Published 2026-03-11 No fix listed CWE-352

TI-2026-18317 CVE-2026-22799

emlog Arbitrary File Upload Vulnerability

HIGH 81

Emlog is an open source website building system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00745 Published 2026-01-12 No fix listed CWE-434

TI-2026-17318 CVE-2026-21433

Emlog vulnerable to Server-Side Request Forgery (SSRF)

LOW 34

Emlog is an open source website building system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00319 Published 2026-01-02 No fix listed CWE-918

TI-2026-17317 CVE-2026-21432

Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

LOW 29

Emlog is an open source website building system.

CVSS 4.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-02 No fix listed CWE-79

TI-2026-17316 CVE-2026-21431

Emlog vulnerable to stored Cross-site Scripting via image name

LOW 10

Emlog is an open source website building system.

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-02 No fix listed CWE-79

TI-2026-17315 CVE-2026-21430

Emlog: CSRF chained with stored XSS leads to ATO

LOW 36

Emlog is an open source website building system.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00185 Published 2026-01-02 No fix listed CWE-352

TI-2026-17314 CVE-2026-21429

Emlog has Broken Access Control (BAC)

MEDIUM 44

Emlog is an open source website building system.

CVSS 4.0LOW 2.0 Network High privileges No interaction EPSS 0.00238 Published 2026-01-02 No fix listed CWE-862

TI-2025-37985 CVE-2025-61318 · GHSA-4r29-3qq2-w2vw

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

HIGH 72

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00781 Published 2025-12-08 No fix listed CWE-24

TI-2025-38907 CVE-2025-62717

Emlog Pro session verification code error due to clearing logic error

LOW 20

Emlog is an open source website building system.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00398 Published 2025-10-24 No fix listed CWE-287

TI-2025-38279 CVE-2025-61930

Emlog Pro has CSRF issue that Enables Admin Password Reset

HIGH 71

Emlog is an open source website building system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00216 Published 2025-10-10 No fix listed CWE-352

TI-2025-38162 CVE-2025-61769

Emlog vulnerable to stored XSS in file upload functionality in emlog

MEDIUM 50

Emlog is an open source website building system.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00282 Published 2025-10-06 No fix listed CWE-79

TI-2025-38044 CVE-2025-61599

Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input

MEDIUM 56

Emlog is an open source website building system.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2025-10-03 No fix listed CWE-79

TI-2025-38042 CVE-2025-61597

Emlog Pro is vulnerable to stored XSS attack through HTML template injection

HIGH 66

Emlog is an open source website building system.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00249 Published 2025-10-03 Fixed in 2.5.22 CWE-79

TI-2025-37674 CVE-2025-60448 · GHSA-w3gq-wfh6-rvfw

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.

MEDIUM 60

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-10-03 No fix listed CWE-79

TI-2025-37673 CVE-2025-60447 · GHSA-6p5p-37p6-cg6j

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.

MEDIUM 60

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00257 Published 2025-10-03 No fix listed CWE-79

TI-2025-08520 CVE-2025-9296 · GHSA-cfhr-jjfr-c8c6

Emlog Pro blogger.php unrestricted upload

MEDIUM 56

A security vulnerability has been detected in Emlog Pro up to 2.5.18.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00421 Published 2025-08-21 No fix listed CWE-284

TI-2025-28596 CVE-2025-44139 · GHSA-q2v9-7453-3jwf

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via…

HIGH 67

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zip

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00793 Published 2025-08-01 No fix listed CWE-434

TI-2025-33791 CVE-2025-53926

Emlog has Stored Cross-site Scripting vulnerability due to error

MEDIUM 60

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00379 Published 2025-07-16 No fix listed CWE-79

TI-2025-33790 CVE-2025-53925

Emlog has Stored Cross-site Scripting vulnerability in file upload functionality

MEDIUM 58

Emlog is an open source website building system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00299 Published 2025-07-16 No fix listed CWE-79

Vulnerabilities

Filters